如何自动访问受htpasswd保护的页面

Question

I have a passwordprotected directory with htaccess and htpasswd.

The htaccess looks like this

AuthUserFile /usr/local/you/safedir/.htpasswd
AuthGroupFile /dev/null
AuthName EnterPassword
AuthType Basic

require user myusername

The htpasswd looks like this

myusername:password887

This password protected directory is named www.mydomainname.com/mystuff

Now, I want to access this page fram a iframe (with www.mydomain.com/mustuff/index.html as src) in index.php in my root, but I dont want to make the users fill in the username and password all the time, just keep them from entering the folder the src is in.

Is there a script that can fill out the username and password automatically without letting the "users" write the username and password all the time?

Answer 1

You can src the frame with the username and password in the link itself:

http://myusername:password887@www.mydomainname.com/mystuff

But this sort of defeats the purpose of password protecting the directory since anyone can look at the page source and know the username/password, and not all browsers support this type of URL.

You could make it so the referer is checked when attempting to access the /mystuff directory, and if it's from where the iframe is embedded, allow access without prompting for a password. But the referer can be spoofed very easily.

Answer 2

不，没有可能，因为htpasswd是针对这个用例的

Answer 3

在谷歌Chrome 37+ （可能还有一些较低的版本）中，您只需要做Jon Lin提供的内容，重新启动浏览器后，您将automatically登录并在您的URL中只能看到常规URL字符串 ， without暴露登录和密码 。